Every CVE Search/ Get API key

CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A...

4.4 MediumFix available

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.28%Down 0.1 points since May 27, 2021
90%50%10%1%

What each source reports

NVD Score used 4.4

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
CVE-2021-20177
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
CVE-2021-20177
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2021-7634 No score

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
EUVD-2021-7634
Updated
2026-11-03
GitHub AdvisoriesGHSA-8hpj-w92q-gf6m No score

A flaw was found in the Linux kernel's implementation of string matching within a packet. A...

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
GHSA-8hpj-w92q-gf6m
Weakness
CWE-125
Updated
2026-11-02
OSV 4.4

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
CVE-2021-20177
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-20177 4.4

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
DEBIAN-CVE-2021-20177
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVOESA-2021-1086 8.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore.(CVE-2020-28374)

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.(CVE-2020-29568)

In the nl80211_policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-119770583(CVE-2020-27068)

A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue an ioctl commands to midi devices, could trigger a use-after-free. A write to this specific memory while freed and before use could cause the flow of execution to change and possibly allow for memory corruption or privilege escalation.(CVE-2020-27786)

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.(CVE-2021-3347)

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.(CVE-2021-3348)

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0423)

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.(CVE-2020-36158)

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-8694)

IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. (CVE-2020-4788)

An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.(CVE-2019-16089)

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0465)

In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0466)

A flaw was found in the Linux kernel futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is…

Record
OESA-2021-1086
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2021-1087 8.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore.(CVE-2020-28374)

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.(CVE-2020-29568)

In the nl80211_policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-119770583(CVE-2020-27068)

A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue an ioctl commands to midi devices, could trigger a use-after-free. A write to this specific memory while freed and before use could cause the flow of execution to change and possibly allow for memory corruption or privilege escalation.(CVE-2020-27786)

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.(CVE-2021-3347)

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.(CVE-2021-3348)

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0423)

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.(CVE-2020-36158)

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2020-8694)

IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. (CVE-2020-4788)

An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.(CVE-2019-16089)

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0465)

In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2020-0466)

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can…

Record
OESA-2021-1087
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2021-20177 4.4

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.

Record
UBUNTU-CVE-2021-20177
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:0241-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter (bnc#1176395).

The following non-security bugs were fixed:

  • ACPI/IORT: Do not blindly trust DMA masks from firmware (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: sysfs: Prefer 'compatible' modalias (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda: Add Cometlake-R PCI ID (git-fixes).
  • ALSA: hda/hdmi - enable runtime pm for CI AMD display audio (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256 (git-fixes).
  • ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (git-fixes).
  • ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T (git-fixes).
  • ALSA: hda/tegra: fix tegra-hda on tegra30 soc (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Apply the workaround generically for Clevo machines (git-fixes).
  • ALSA: pcm: fix hw_rule deps kABI (bsc#1181014).
  • ALSA: pcm: One more dependency for hw constraints (bsc#1181014).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ALSA: usb-audio: Always apply the hw constraints for implicit fb sync (bsc#1181014).
  • ALSA: usb-audio: Annotate the endpoint index in audioformat (git-fixes).
  • ALSA: usb-audio: Avoid implicit feedback on Pioneer devices (bsc#1181014).
  • ALSA: usb-audio: Avoid unnecessary interface re-setup (git-fixes).
  • ALSA: usb-audio: Choose audioformat of a counter-part substream (git-fixes).
  • ALSA: usb-audio: Fix hw constraints dependencies (bsc#1181014).
  • ALSA: usb-audio: Fix implicit feedback sync setup for Pioneer devices (git-fixes).
  • ALSA: usb-audio: Fix the missing endpoints creations for quirks (git-fixes).
  • ALSA: usb-audio: Fix UAC1 rate setup for secondary endpoints (bsc#1181014).
  • ALSA: usb-audio: Set sample rate for all sharing EPs on UAC1 (bsc#1181014).
  • arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback (bsc#1152489).
  • arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
  • arm64: pgtable: Fix pte_accessible() (bsc#1180130).
  • ASoC: ak4458: correct reset polarity (git-fixes).
  • ASoC: dapm: remove widget from dirty list on free (git-fixes).
  • ASoC: Intel: fix error code cnl_set_dsp_D0() (git-fixes).
  • ASoC: meson: axg-tdm-interface: fix loopback (git-fixes). -…
Record
openSUSE-SU-2021:0241-1
Updated
2026-11-02
OSVSUSE-SU-2021:0347-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter (bnc#1176395).
  • CVE-2020-36158: Fixed an issue wich might have allowed a remote attackers to execute arbitrary code via a long SSID value in mwifiex_cmd_802_11_ad_hoc_start() (bnc#1180559).
  • CVE-2020-28374: Fixed a vulnerability caused by insufficient identifier checking in the LIO SCSI target code. This could have been used by a remote attackers to read or write files via directory traversal in an XCOPY request (bnc#1178372).

The following non-security bugs were fixed:

  • ACPI/IORT: Do not blindly trust DMA masks from firmware (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: sysfs: Prefer 'compatible' modalias (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda: Add Cometlake-R PCI ID (git-fixes).
  • ALSA: hda/conexant: add a new hda codec CX11970 (git-fixes).
  • ALSA: hda/hdmi - enable runtime pm for CI AMD display audio (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk for more HP laptops (git-fixes).
  • ALSA: hda/realtek: Add two 'Intel Reference board' SSID in the ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (git-fixes).
  • ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (git-fixes).
  • ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (git-fixes).
  • ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T (git-fixes).
  • ALSA: hda/realtek - Modify Dell platform name (git-fixes).
  • ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (git-fixes).
  • ALSA: hda/realtek - Supported Dell fixed type headset (git-fixes).
  • ALSA: hda/tegra: fix tegra-hda on tegra30 soc (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Apply the workaround generically for Clevo machines (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params…
Record
SUSE-SU-2021:0347-1
Updated
2026-11-02
OSVSUSE-SU-2021:0348-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-36158: Fixed an issue wich might have allowed a remote attackers to execute arbitrary code via a long SSID value in mwifiex_cmd_802_11_ad_hoc_start() (bnc#1180559).
  • CVE-2020-28374: Fixed a vulnerability caused by insufficient identifier checking in the LIO SCSI target code. This could have been used by a remote attackers to read or write files via directory traversal in an XCOPY request (bnc#1178372).

The following non-security bugs were fixed:

  • ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
  • ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
  • ACPI: PNP: compare the string length in the matching_id() (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ALSA: ca0106: fix error code handling (git-fixes).
  • ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table (git-fixes).
  • ALSA: hda: Fix potential race in unsol event handler (git-fixes).
  • ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
  • ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
  • ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
  • ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
  • ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
  • ALSA: line6: Perform sanity check for each URB creation (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
  • ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ALSA: timer: Limit max amount of slave instances (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all…
Record
SUSE-SU-2021:0348-1
Updated
2026-11-02
OSVSUSE-SU-2021:0353-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter (bnc#1176395).

The following non-security bugs were fixed:

  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
  • arm64: pgtable: Fix pte_accessible() (bsc#1180130).
  • ASoC: dapm: remove widget from dirty list on free (git-fixes).
  • ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
  • bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
  • bnxt_en: Fix accumulation of bp->net_stats_prev (bsc#1104745 ).
  • bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
  • bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
  • bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
  • bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
  • bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
  • bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
  • bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
  • bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
  • bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).
  • btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
  • btrfs: add a flag to iterate_inodes_from_logical to find all
  • btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
  • btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
  • btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
  • btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
  • caif: no need to check return value of debugfs_create functions (git-fixes).
  • can: c_can: c_can_power_up(): fix error handling (git-fixes).
  • can: dev:…
Record
SUSE-SU-2021:0353-1
Updated
2026-11-02
OSVSUSE-SU-2021:0354-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter (bnc#1176395).

The following non-security bugs were fixed:

  • ACPI/IORT: Do not blindly trust DMA masks from firmware (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: sysfs: Prefer 'compatible' modalias (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda: Add Cometlake-R PCI ID (git-fixes).
  • ALSA: hda/conexant: add a new hda codec CX11970 (git-fixes).
  • ALSA: hda/hdmi - enable runtime pm for CI AMD display audio (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk for more HP laptops (git-fixes).
  • ALSA: hda/realtek: Add two 'Intel Reference board' SSID in the ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (git-fixes).
  • ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (git-fixes).
  • ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (git-fixes).
  • ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T (git-fixes).
  • ALSA: hda/realtek - Modify Dell platform name (git-fixes).
  • ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (git-fixes).
  • ALSA: hda/realtek - Supported Dell fixed type headset (git-fixes).
  • ALSA: hda/tegra: fix tegra-hda on tegra30 soc (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Apply the workaround generically for Clevo machines (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: pcm: fix hw_rule deps kABI (bsc#1181014).
  • ALSA: pcm: One more dependency for hw constraints (bsc#1181014).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ALSA: usb-audio: Add quirk for BOSS AD-10 (git-fixes).
  • ALSA: usb-audio: Add quirk for RC-505 (git-fixes).
  • ALSA: usb-audio: Always apply the hw constraints for implicit fb sync (bsc#1181014).
  • ALSA:…
Record
SUSE-SU-2021:0354-1
Updated
2026-11-02
OSVSUSE-SU-2021:0427-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 realtime kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter (bnc#1176395).
  • CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).

The following non-security bugs were fixed:

  • ACPI/IORT: Do not blindly trust DMA masks from firmware (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPI: sysfs: Prefer 'compatible' modalias (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda/conexant: add a new hda codec CX11970 (git-fixes).
  • ALSA: hda/hdmi - enable runtime pm for CI AMD display audio (git-fixes).
  • ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (git-fixes).
  • ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T (git-fixes).
  • ALSA: hda/realtek - Modify Dell platform name (git-fixes).
  • ALSA: hda/realtek - Supported Dell fixed type headset (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk for more HP laptops (git-fixes).
  • ALSA: hda/realtek: Add two 'Intel Reference board' SSID in the ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256 (git-fixes).
  • ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (git-fixes).
  • ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (git-fixes).
  • ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (git-fixes).
  • ALSA: hda/tegra: fix tegra-hda on tegra30 soc (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Apply the workaround generically for Clevo machines (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: hda: Add Cometlake-R PCI ID (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: pcm: One more dependency for hw constraints (bsc#1181014).
  • ALSA: pcm: fix hw_rule deps kABI (bsc#1181014).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ALSA: usb-audio: Add quirk for BOSS AD-10 (git-fixes).
  • ALSA: usb-audio: Add quirk for RC-505 (git-fixes).
  • ALSA: usb-audio:…
Record
SUSE-SU-2021:0427-1
Updated
2026-11-02
OSVSUSE-SU-2021:0433-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).
  • CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
  • CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).

The following non-security bugs were fixed:

  • ACPI: PNP: compare the string length in the matching_id() (git-fixes).
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
  • ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
  • ALSA: ca0106: fix error code handling (git-fixes).
  • ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
  • ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
  • ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
  • ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table (git-fixes).
  • ALSA: hda: Fix potential race in unsol event handler (git-fixes).
  • ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
  • ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
  • ALSA: line6: Perform sanity check for each URB creation (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
  • ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ALSA: timer: Limit max amount of slave instances (git-fixes).
  • ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
  • ALSA: usb-audio: Add…
Record
SUSE-SU-2021:0433-1
Updated
2026-11-02
OSVSUSE-SU-2021:0532-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
  • CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
  • CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
  • CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
  • CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
  • CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

  • ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
  • ALSA: doc: Fix reference to mixart.rst (git-fixes).
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
  • ALSA: hda/via: Add minimum mute flag (git-fixes).
  • ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
  • ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
  • ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
  • ASoC: dapm: remove widget from dirty list on free (git-fixes).
  • EDAC/amd64: Fix PCI component registration (bsc#1112178).
  • IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
  • KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
  • KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
  • NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
  • NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
  • NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
  • NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
  • RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
  • RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
  • RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
  • RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
  • RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
  • RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
  • RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
  • RDMA/core: Fix reported speed and width (bsc#1046306 ).
  • RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
  • RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
  • RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
  • RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
  • RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
  • RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
  • RDMA/hns: bugfix for slab-out-of-bounds when…
Record
SUSE-SU-2021:0532-1
Updated
2026-11-02
OSVUSN-4750-1 No score

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Bodong Zhao discovered a use-after-free in the Sun keyboard driver implementation in the Linux kernel. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-25669)

It was discovered that the jfs file system implementation in the Linux kernel contained an out-of-bounds read vulnerability. A local attacker could use this to possibly cause a denial of service (system crash). (CVE-2020-27815)

Shisong Qin and Bodong Zhao discovered that Speakup screen reader driver in the Linux kernel did not correctly handle setting line discipline in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-27830, CVE-2020-28941)

It was discovered that an information leak existed in the syscall implementation in the Linux kernel on 32 bit systems. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2020-28588)

Michael Kurth and Pawel Wieczorkiewicz discovered that the Xen event processing backend in the Linux kernel did not properly limit the number of events queued. An attacker in a guest VM could use this to cause a denial of service in the host OS. (CVE-2020-29568)

Olivier Benjamin and Pawel Wieczorkiewicz discovered a race condition the Xen paravirt block backend in the Linux kernel, leading to a use-after-free vulnerability. An attacker in a guest VM could use this to cause a denial of service in the host OS. (CVE-2020-29569)

Jann Horn discovered that the tty subsystem of the Linux kernel did not use consistent locking in some situations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-29660)

Jann Horn discovered a race condition in the tty subsystem of the Linux kernel in the locking for the TIOCSPGRP ioctl(), leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-29661)

It was discovered that the netfilter subsystem in the Linux kernel did not properly handle filter rules in some situations. A local attacker with the CAP_NET_ADMIN capability could use this to cause a denial of service. (CVE-2021-20177)

Record
USN-4750-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 5.5.13-1
5.5.13-1
linux
Debian:13
 before 5.5.13-1
5.5.13-1
linux
Debian:14
 before 5.5.13-1
5.5.13-1
linux-4.19
Debian:9
From an advisory covering 11 CVEs
 before 4.19.171-2~deb9u1, plus listed versions
4.19.132-1~deb9u14.19.132-1~deb9u24.19.146-1~deb9u14.19.152-1~deb9u14.19.160-2~deb9u1
4.19.171-2~deb9u1
linux
Debian:10
From an advisory covering 11 CVEs
 before 4.19.171-2, plus listed versions
4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1
Show 24 moreShow less
4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1
4.19.171-2
kernel
openEuler:20.03-LTS
From an advisory covering 21 CVEs
 before 4.19.90-2102.2.0.0057.oe1
4.19.90-2102.2.0.0057.oe1
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 15 CVEs
 before 4.19.90-2102.2.0.0057.oe1
4.19.90-2102.2.0.0057.oe1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-18.35.2
5.3.18-18.35.2
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-18.35.2
5.3.18-18.35.2
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-18.35.2
5.3.18-18.35.2
Show 158 moreShow less
Affected packages
PackageAffectedFixed
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 9 CVEs
 before 4.12.14-16.44.1
4.12.14-16.44.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kgraft-patch-SLE12-SP5_Update_15
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 8 CVEs
 before 1-8.3.1
1-8.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.2
4.12.14-122.60.2
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.60.1
4.12.14-122.60.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2.9.21.2
5.3.18-24.49.2.9.21.2
kernel-preempt
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.3
5.3.18-24.49.3
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-preempt
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-livepatch-SLE15-SP2_Update_10
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 9 CVEs
 before 1-5.3.2
1-5.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 9 CVEs
 before 5.3.18-24.49.2
5.3.18-24.49.2
kernel-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 10 CVEs
 before 5.3.18-25.1
5.3.18-25.1
kernel-rt_debug
SUSE:Real Time Module 15 SP2
From an advisory covering 10 CVEs
 before 5.3.18-25.1
5.3.18-25.1
kernel-source-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 10 CVEs
 before 5.3.18-25.1
5.3.18-25.1
kernel-syms-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 10 CVEs
 before 5.3.18-25.1
5.3.18-25.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 10 CVEs
 before 4.12.14-10.31.1
4.12.14-10.31.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 10 CVEs
 before 4.12.14-10.31.1
4.12.14-10.31.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 10 CVEs
 before 4.12.14-10.31.1
4.12.14-10.31.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 10 CVEs
 before 4.12.14-10.31.1
4.12.14-10.31.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-livepatch-SLE15-SP1_Update_22
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 8 CVEs
 before 1-3.5.1
1-3.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Manager Proxy 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Manager Proxy 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Manager Proxy 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Manager Proxy 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Manager Proxy 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-zfcpdump
SUSE:Manager Server 4.0
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-default
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-docs
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-obs-build
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-source
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
kernel-syms
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.12.14-197.83.1
4.12.14-197.83.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1038.40~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.1
5.4.0-1038.40~18.04.1
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1040.42~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 6 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1037.40~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.1
5.4.0-1037.40~18.04.1
linux-gke-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1036.38~18.04.1, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
linux-gkeop-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1010.11~18.04.1, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.15.4.0-1008.9~18.04.15.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-66.74~18.04.2, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 13 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.1
5.4.0-66.74~18.04.2
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1038.41~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.1
5.4.0-1038.41~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1029.32~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 6 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.1
5.4.0-1029.32~18.04.1
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-66.74, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 25 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.73
5.4.0-66.74
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1038.40, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 19 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.39
5.4.0-1038.40
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1040.42, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 16 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.41
5.4.0-1040.42
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1037.40, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 17 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.39
5.4.0-1037.40
linux-gke
Ubuntu:20.04:LTS
 before 5.4.0-1036.38, plus listed versions
5.4.0-1033.355.4.0-1035.37
5.4.0-1036.38
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1010.11, plus listed versions
5.4.0-1008.95.4.0-1009.10
5.4.0-1010.11
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1033.34, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 15 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.33
5.4.0-1033.34
linux-oracle
Ubuntu:20.04:LTS
 before 5.4.0-1038.41, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 17 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.40
5.4.0-1038.41
linux-raspi
Ubuntu:20.04:LTS
 before 5.4.0-1029.32, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 10 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.31
5.4.0-1029.32
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1069.73+fips2, plus listed versions
5.4.0-1021.21+fips2
5.4.0-1069.73+fips2
linux-azure-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1073.76+fips1, plus listed versions
5.4.0-1022.22+fips1
5.4.0-1073.76+fips1
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1067.71~20.04.1, plus listed versions
5.4.0-1021.21+fips1
5.4.0-1067.71~20.04.1
linux-aws-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips2
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1022.22+fips1
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-aws-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1038.40~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.1
5.4.0-1038.40~18.04.1
linux-azure-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1040.42~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 6 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
linux-gcp-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1037.40~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.1
5.4.0-1037.40~18.04.1
linux-gke-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1036.38~18.04.1, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
linux-gkeop-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1010.11~18.04.1, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.15.4.0-1008.9~18.04.15.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-66.74~18.04.2, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 13 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.1
5.4.0-66.74~18.04.2
linux-oracle-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1038.41~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 7 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.1
5.4.0-1038.41~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1029.32~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 6 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.1
5.4.0-1029.32~18.04.1
linux
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-66.74, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 25 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.73
5.4.0-66.74
linux-aws
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1038.40, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 19 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.39
5.4.0-1038.40
linux-azure
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1040.42, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 16 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.41
5.4.0-1040.42
linux-gcp
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1037.40, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 17 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.39
5.4.0-1037.40
linux-gkeop
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1010.11, plus listed versions
5.4.0-1008.95.4.0-1009.10
5.4.0-1010.11
linux-kvm
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1033.34, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 15 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.33
5.4.0-1033.34
linux-oracle
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1038.41, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 17 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.40
5.4.0-1038.41
linux-raspi
Ubuntu:20.04:LTS
From an advisory covering 10 CVEs
 before 5.4.0-1029.32, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 10 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.31
5.4.0-1029.32
kernel-debug
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-default
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-default-base
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1.lp152.8.21.1
5.3.18-lp152.63.1.lp152.8.21.1
kernel-docs
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-kvmsmall
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-obs-build
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-obs-qa
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-preempt
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-source
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1
kernel-syms
openSUSE:Leap 15.2
From an advisory covering 7 CVEs
 before 5.3.18-lp152.63.1
5.3.18-lp152.63.1

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-20177 is a medium vulnerability (CVSS 4.4) in Linux Kernel, published January 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in linux 5.5.13-1.

References

Show 189 moreShow less
This page doesn't list everything

Left out here: the rest of 10 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open